You cannot select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
tailscale/net/tlsdial
Brad Fitzpatrick 8009ad74a3 cmd/derper, net/tlsdial: fix client's self-signed cert validation
This fixes the implementation and test from #15208 which apparently
never worked.

Ignore the metacert when counting the number of expected certs
presented.

And fix the test, pulling out the TLSConfig setup code into something
shared between the real cmd/derper and the test.

Fixes #15579

Change-Id: I90526e38e59f89b480629b415f00587b107de10a
Signed-off-by: Brad Fitzpatrick <bradfitz@tailscale.com>
7 months ago
..
blockblame net/tlsdial: call out firewalls blocking Tailscale in health warnings (#13840) 1 year ago
deps_test.go all: update copyright and license headers 3 years ago
tlsdial.go cmd/derper, net/tlsdial: fix client's self-signed cert validation 7 months ago
tlsdial_test.go ipn/ipnlocal: also use LetsEncrypt-baked-in roots for cert validation 11 months ago